Commit Graph

  • 794800c0cf chore(backend/security): include leaf cert Subject/Issuer/Thumbprint in chain-failure log Oliver Kieselbach 2026-05-08 15:44:15 +02:00
  • 9af3de15d4 fix(backend/security): pin client cert chain trust to embedded Intune root (v2) Oliver Kieselbach 2026-05-08 15:28:21 +02:00
  • 6658303c0d feat(ops/consent): emit ConsentFlowSuccess to close the consent-flow lifecycle Oliver Kieselbach 2026-05-08 14:51:54 +02:00
  • 5ae7dc40af Revert "fix(backend/security): pin client cert chain trust to embedded Intune root" Oliver Kieselbach 2026-05-08 14:35:52 +02:00
  • 7e21591b55 fix(backend/security): pin client cert chain trust to embedded Intune root Oliver Kieselbach 2026-05-08 14:22:20 +02:00
  • 4870e09b39 chore(web): drop Inspector deep-link from FailureSnapshotBlock + regen artifacts Oliver Kieselbach 2026-05-08 14:12:50 +02:00
  • b6178db8e6 fix(backend/security): enforce body-tenant for non-GA + lift query-tenant guards to middleware Oliver Kieselbach 2026-05-08 14:12:39 +02:00
  • 592788be99 fix(web/security): drop legacy localStorage init in TenantContext Oliver Kieselbach 2026-05-08 13:30:14 +02:00
  • f620b884c6 fix(web/security): tighten CSP and harden /go bootstrap error path Oliver Kieselbach 2026-05-08 13:18:09 +02:00
  • 0c24719e16 feat(do-telemetry): add MCC + LinkLocal + symmetric breakdown across all layers Oliver Kieselbach 2026-05-08 11:37:48 +02:00
  • c97fb97e54 refactor(mcp): align OAuth state signing key with backend convention Oliver Kieselbach 2026-05-08 11:30:45 +02:00
  • a4e37cc087 fix(mcp): harden OAuth proxy and access-guard against external review findings Oliver Kieselbach 2026-05-08 11:18:53 +02:00
  • c0a8f2ed27 fix(agent/v1/sw-inventory): mirror V2 fix — accept AAD/MSA SIDs and emit real registry path Oliver Kieselbach 2026-05-07 22:53:33 +02:00
  • 6c4f7250b9 fix(agent/v2/sw-inventory): include AAD/MSA SIDs and emit real registry path in logs Oliver Kieselbach 2026-05-07 22:50:00 +02:00
  • e39719d3ae updated bootstraper V2 Oliver Kieselbach 2026-05-07 22:29:36 +02:00
  • d2f6fb1deb chore(.claude/commands): bump for ux-insights customMeasurements fix Oliver Kieselbach 2026-05-07 22:18:15 +02:00
  • cacfee4bcc fix(web/sla): violator link points to /sessions/{id} not /session/{tenant}/{id} Oliver Kieselbach 2026-05-07 22:08:45 +02:00
  • 4a0e56a731 fix(web): use submitted (not live) tenant filter for session fetch URL Oliver Kieselbach 2026-05-07 21:12:13 +02:00
  • c6e46e9a0a fis dashboard session fetch Oliver Kieselbach 2026-05-07 20:55:35 +02:00
  • 25dc67ff69 fix(mcp): security hardening - 7 review findings Oliver Kieselbach 2026-05-07 20:22:17 +02:00
  • 05ce8cac9a fix(mcp,backend): close two gaps from MCP routing PR — get_ops_events tenantId + global metrics summary tenantId filter Oliver Kieselbach 2026-05-07 17:09:43 +02:00
  • 688162eb73 fix(web): rename Email to "Communication Email (optional but recommended)" + center Submit Logs card Oliver Kieselbach 2026-05-07 16:48:08 +02:00
  • e42b42b50b Merge pull request #60 from okieselbach/mcp-routing-and-cleanup Oliver Kieselbach 2026-05-07 16:44:38 +02:00
  • b692baa5d9 feat(mcp): get_session_summary lean — cap key events + drop heavy payloads Oliver Kieselbach 2026-05-07 16:41:22 +02:00
  • b4529d2c71 feat(mcp): get_resource tool + description tightening Oliver Kieselbach 2026-05-07 16:40:01 +02:00
  • 629c12eb55 feat(mcp): role-aware routing — GA → /api/global/*, tenant-admin → /api/* Oliver Kieselbach 2026-05-07 16:37:27 +02:00
  • 3116a0ecc9 feat(backend,web): geographic-sessions default-lean (?full=1 opt-out) Oliver Kieselbach 2026-05-07 16:31:39 +02:00
  • 84a1aa14cb feat(backend): server-side filters for /api/sessions/{id}/events Oliver Kieselbach 2026-05-07 16:27:49 +02:00
  • b9997809ed feat(backend): tenantId filter on global audit/logs + ops-events Oliver Kieselbach 2026-05-07 16:22:52 +02:00
  • fae4d5eb2f feat(backend): /api/auth/mcp returns isGlobalAdmin Oliver Kieselbach 2026-05-07 16:22:40 +02:00
  • 3fe519d839 Merge branch 'main' of https://github.com/okieselbach/Autopilot-Monitor Oliver Kieselbach 2026-05-07 16:18:37 +02:00
  • 5292cd2dfe fix submit diag sidebar entry Oliver Kieselbach 2026-05-07 16:17:52 +02:00
  • 2725626744 Merge pull request #59 from okieselbach/mcp-tool-fixes-comprehensive Oliver Kieselbach 2026-05-07 16:08:02 +02:00
  • 089c0123e6 feat(reports): add Submit Logs page for session-less diag-files reports Oliver Kieselbach 2026-05-07 16:02:55 +02:00
  • 93152d86ec fix whiteglove split Oliver Kieselbach 2026-05-07 15:02:52 +02:00
  • d4d828d8c6 feat(web): in-flight request collapser (dedupedAuthFetch) + 2 callsites Oliver Kieselbach 2026-05-07 14:17:59 +02:00
  • 22427e24c5 perf(web,backend): finish off the duplicate-fetch + response-header fixes Oliver Kieselbach 2026-05-07 14:01:09 +02:00
  • 0fc81f99ed perf(web,backend): cut dashboard load time + fix duplicate fetches Oliver Kieselbach 2026-05-07 13:37:52 +02:00
  • b61e327752 added full width button Oliver Kieselbach 2026-05-07 12:19:11 +02:00
  • b91b6c6d52 fix(backend): push AgentVersion(Prefix) filter server-side in search_sessions scan Oliver Kieselbach 2026-05-07 12:01:31 +02:00
  • 00f3bf61ef feat(mcp,backend): server-driven response cap + version prefix + lean projection Oliver Kieselbach 2026-05-07 11:31:50 +02:00
  • d4464619b5 fix span param Oliver Kieselbach 2026-05-07 11:04:10 +02:00
  • abf71f7c14 chore(mcp): bump hono / ip-address / express-rate-limit via npm audit fix Oliver Kieselbach 2026-05-07 10:59:58 +02:00
  • 861159873e added width query param to session list Oliver Kieselbach 2026-05-07 10:58:49 +02:00
  • 840ac9f21f feat(backend,mcp): paginate the last three legacy MCP diagnostic tools Oliver Kieselbach 2026-05-07 10:55:39 +02:00
  • 08107d7b68 fixed scripts v2 leftovers Oliver Kieselbach 2026-05-07 10:17:35 +02:00
  • d8e1eb9292 Changed bootstrap script and V2 agent binary name (now without V2, preperation for V1 replacement) Oliver Kieselbach 2026-05-07 10:12:37 +02:00
  • c337970143 fix audit fetching Oliver Kieselbach 2026-05-07 09:58:53 +02:00
  • 939bc2ebc7 fixed platform metrics, ops and session reports fetching Oliver Kieselbach 2026-05-07 09:14:37 +02:00
  • da8be3e508 added badges to readme Oliver Kieselbach 2026-05-07 08:51:22 +02:00
  • e7e501d8cd added audit filter for unnecessary entries Oliver Kieselbach 2026-05-07 08:39:04 +02:00
  • 5a44a9e495 fix(web): advance dashboard pagination on first Next click Oliver Kieselbach 2026-05-06 21:29:14 +02:00
  • 9b4100f7d6 fix(web): unify dashboard pagination + bump fleet-health page size Oliver Kieselbach 2026-05-06 21:15:37 +02:00
  • 70382e991b feat(backend,web,mcp,shared): MS-Graph nextLink pagination rollout Oliver Kieselbach 2026-05-06 20:53:46 +02:00
  • 9a511bac29 fix(web): exempt static assets and well-known files from middleware Oliver Kieselbach 2026-05-06 20:44:17 +02:00
  • 576ea02b92 feat(web,backend): public/portal split via host-based middleware Oliver Kieselbach 2026-05-06 15:37:07 +02:00
  • a35726dcf0 fix(web): split WhiteGlove timeline at Part-2 agent_started, not at whiteglove_resumed Oliver Kieselbach 2026-05-06 13:23:23 +02:00
  • b86af63055 changed msal to use window.location.origin Oliver Kieselbach 2026-05-06 12:36:59 +02:00
  • b4e98e32eb fix(agent): add MS-Organization-Access cert fallback to TenantIdResolver Oliver Kieselbach 2026-05-05 22:19:02 +02:00
  • b67d68c552 fix(agent): TenantIdResolver fallback for non-Type-6 enrollments + UPN redaction Oliver Kieselbach 2026-05-05 17:13:48 +02:00
  • 6935ca8e00 fix(backend,web): expose member-readable tenant flags via feature-flags endpoint Oliver Kieselbach 2026-05-05 13:18:47 +02:00
  • 9b0a2dca95 fix(backend,web): role-gated tenant notifications + audience visibility Oliver Kieselbach 2026-05-05 12:35:43 +02:00
  • 5ef6c8b1d2 fix(mcp): MCP server security & capability audit (Phases A-E) Oliver Kieselbach 2026-05-05 12:12:54 +02:00
  • feba2a2551 fix(backend): materialize CurrentPhase=Failed on terminal failed status Oliver Kieselbach 2026-05-05 10:42:20 +02:00
  • 0687612a96 fix(v2): preserve source timestamps + boot-anchor deadline math Oliver Kieselbach 2026-05-04 20:24:24 +02:00
  • 84610f9fb0 refactor(v2): unify signal census between final-status.json and audit trail Oliver Kieselbach 2026-05-04 19:57:50 +02:00
  • 41e47191f3 test(v2): lock .part1-<utc> archive bucket inclusion in diag package Oliver Kieselbach 2026-05-04 19:13:23 +02:00
  • d16b60f14c feat(v2): WG Part-2 architectural cleanup + install-mode handoff fix Oliver Kieselbach 2026-05-04 18:36:37 +02:00
  • c0b7b50457 fix(v2): PR-X1 — skip summary dialog + enrollment_summary_shown on WG Part 1 Oliver Kieselbach 2026-05-04 11:25:35 +02:00
  • ce97a583d0 fix(v2): propagate AadJoinedWithUser + rename aad_user_joined_late→_observed Oliver Kieselbach 2026-05-04 09:37:39 +02:00
  • 11838e1719 feat(web): PR4 — Lifecycle Anchors tab in Inspector Oliver Kieselbach 2026-05-03 21:51:57 +02:00
  • 118b4c0a41 test(v2): extract DeathRattlePrelude so PR3 gate is directly testable Oliver Kieselbach 2026-05-03 21:40:10 +02:00
  • 6e240fba53 feat(v2): PR3 — Death-Rattle (prior_run_died_with_state) Oliver Kieselbach 2026-05-03 21:06:39 +02:00
  • 7fe0e9ef58 feat(v2): PR2 — wire DecisionState snapshot into EventTimelineEmitter Oliver Kieselbach 2026-05-03 20:41:06 +02:00
  • a98f9d5725 feat(v2): PR1 — DecisionStateSnapshotBuilder + lifecycle-anchor allowlist Oliver Kieselbach 2026-05-03 20:35:26 +02:00
  • fb31a2d6d1 feat(v2): close Hybrid User-Driven completion gaps Oliver Kieselbach 2026-05-02 10:56:10 +02:00
  • ac3b3d82db feat(web): visualize SkipUserStatusPage as skipped phases Oliver Kieselbach 2026-05-01 18:18:18 +02:00
  • 4a996070b8 feat(noise): add ModernDeployment EventID 1010 to harmless default list Oliver Kieselbach 2026-04-30 22:54:30 +02:00
  • b86c294771 fix(agent): merge bootstrap-config.json on --install instead of clobbering Oliver Kieselbach 2026-04-30 22:15:29 +02:00
  • 430d83453e test(agent): serialise V2.Core RecoveryPath / EnrollmentOrchestrator / CollectorBaseReentrancy Oliver Kieselbach 2026-04-30 22:05:04 +02:00
  • 3016c15919 feat(agent): event-driven TenantId wait via RegistryWatcher Oliver Kieselbach 2026-04-30 21:54:43 +02:00
  • 58be7d19c3 fix(agent): force Registry64 view + trim TenantIdResolver miss log Oliver Kieselbach 2026-04-30 20:38:01 +02:00
  • 99ec25175d feat(agent): backport V1 TenantIdResolver with CloudDomainJoin fallback Oliver Kieselbach 2026-04-30 19:13:59 +02:00
  • 5d03c6fbff chore(agent): demote success-path transport + IME re-match logs to Debug Oliver Kieselbach 2026-04-30 18:59:41 +02:00
  • fc95075735 feat(agent): V2 TenantIdResolver falls back to CloudDomainJoin registry Oliver Kieselbach 2026-04-30 18:59:33 +02:00
  • 86ae616b3b feat(bootstrap): verify runtime process started after schtasks /Run Oliver Kieselbach 2026-04-30 18:05:51 +02:00
  • ba0fb7ae0c feat(agent): V2 WhiteGlove Part 1 graceful-exit hardening Oliver Kieselbach 2026-04-30 18:05:37 +02:00
  • 9f3ee5eedb fix(agent): V1 bails cleanly when TenantId missing instead of crashing Oliver Kieselbach 2026-04-30 15:59:29 +02:00
  • 4066171f14 feat(backend): structured audit trail on V2 DecisionEngine timeline events Oliver Kieselbach 2026-04-30 15:55:51 +02:00
  • dbef6921ae feat(vuln): queue-driven correlation + WhiteGlove Part-1 inventory trigger Oliver Kieselbach 2026-04-30 15:25:28 +02:00
  • 627784e877 perf(backend): server-side $filter on tenantAssociatedDevices Oliver Kieselbach 2026-04-30 09:30:21 +02:00
  • eee65ba000 fix(metrics): honor days time-window in MCP get_metrics, get_usage_metrics, get_platform_metrics Oliver Kieselbach 2026-04-30 08:45:55 +02:00
  • 4aea916c14 fix(agent): correct V2 HAADJ detection + drop duplicate snapshot ticks Oliver Kieselbach 2026-04-29 21:37:12 +02:00
  • fca33d500b feat(web): mark admin-flipped sessions with a 'manual' pill on the status badge Oliver Kieselbach 2026-04-29 19:52:53 +02:00
  • 57b0557558 fix(backend): anchor admin-marked CompletedAt on LastEventAt, not UtcNow Oliver Kieselbach 2026-04-29 19:00:39 +02:00
  • f14c426a20 feat(agent): detect TPM-PSS-broken hardware on terminal Schannel failure Oliver Kieselbach 2026-04-29 13:04:41 +02:00
  • d1c5b78acf chore counter Oliver Kieselbach 2026-04-29 09:00:52 +02:00
  • cb21bf9bba chore Oliver Kieselbach 2026-04-29 09:00:49 +02:00
  • bc453c31d7 chore Oliver Kieselbach 2026-04-29 08:57:16 +02:00
  • 617d63a9c2 chore(backend): security patches + minor bumps on net8.0 Oliver Kieselbach 2026-04-29 07:46:05 +02:00